internet explorer problem

i have ie 8 but it shuts unexpextedly some times, when i start pc i get the messages ; see attached file , also version of ie screen shot attached
screen-shot.doc
mahmood_786Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Martin81Commented:
As your on windows XP you should have the option to uninstall IE8 from add/remove programs. My advice would be to uninstall then reinstall it.
0
FarWestCommented:
it is better if you go to tools/options/advance tab and then check off the "enable third party browser extensions"
I suspect that those DLL are related to some kind of malware that was cleaned up by the anti-virus
good luck
0
rpggamergirlCommented:
Those are bad dlls that maybe the scanner you used have removed but left the reg entries intact.

Error loading usually means that those bad dlls have been removed, hence the error. You could disable the relevant loading point in the registry via "msconfig" that points to those files. You could also use Hijackthis to remove the startup points.

Or, you could run a scan like MalwareBytes or other tools as the PC  might still be infected. Post the logs for us to look at.


MalwareBytes
Malwarebytes http://www.malwarebytes.org/mbam-download.php




If the problem persists afterwards, you may run these tool as well.

You can try TDSSKiller or RogueKiller
TDSSKiller:
http://support.kaspersky.com/viruses/solutions?qid=208280684


ComboFix:
http://www.bleepingcomputer.com/combofix/how-to-use-combofix
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Rowby Goren Makes an Impact on Screen and Online

Learn about longtime user Rowby Goren and his great contributions to the site. We explore his method for posing questions that are likely to yield a solution, and take a look at how his career transformed from a Hollywood writer to a website entrepreneur.

rpggamergirlCommented:
In Hijackthis the 04 entries would be same or similar below which you can checkmark and click "Fix checked" for Hijackthis to remove them and stop the error.

O4 - HKCU\..\Run: [Gsare] rundll32.exe "C:\WINDOWS\kbdvexy.dll",Startup
O4 - HKLM\..\Run: [Dcuxiwamiku] rundll32.exe "C:\WINDOWS\uqewimuwesebebe.dll",Startup

OR disable via msconfig:

Start > Run > type in

msconfig
Press Enter.

click on the "Startup" tab and uncheck the relevant entries.
0
mahmood_786Author Commented:
please see the log file attached
mbam-log-2011-04-15--01-07-11-.txt
0
rpggamergirlCommented:
Did you run ComboFix? Can we look at the log?

MalwareBytes removed some files that ComboFix had in quarantine.
0
mahmood_786Author Commented:
ok  combofix log is attached.
log.txt
0
rpggamergirlCommented:
Thanks for the log.

I haven't thoroughly checked the CF log as I'm on my way out.... but this script should stopped the error messages in your screenshot.
I'll check back in few hours.
It's a file infector tha talso infected the system.

Run combofix again using this script.
 
1. Open Notepad.
2. Now copy/paste the text between the lines below into the Notepad window:
------------------------------------------------------------------------
RenV::
c:\program files\Adobe\Acrobat 7.0\Distillr\Acrotray .exe
c:\program files\Analog Devices\SoundMAX\DrvLsnr .exe
c:\program files\ATI Technologies\ATI Control Panel\atiptaxx .exe
c:\program files\Common Files\Real\Update_OB\realsched .exe
c:\program files\CyberLink\PowerDVD\PDVDServ .exe
c:\program files\CyberLink\PowerDVD\Language\Language .exe
c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier .exe
c:\program files\Java\jre6\bin\jusched .exe
c:\program files\LogMeIn\x86\LogMeInSystray .exe
c:\program files\McAfee.com\Agent\mcagent .exe
c:\program files\Nokia\Nokia PC Suite 7\PCSuite .exe
c:\program files\QuickTime\QTTask   .exe
c:\program files\Spybot - Search & Destroy\TeaTimer .exe
c:\program files\Windows Live\Messenger\msnmsgr  .exe
c:\windows\FixCamera .exe
c:\windows\tsnp2std .exe
c:\windows\vsnp2std .exe
c:\windows\ime\IMJP8_1\IMJPMIG .exe
c:\windows\system32\rundll32 .exe


Registry::
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Gsare"=-
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Dcuxiwamiku"=-

------------------------------------------------------------------------
3. Save the above as CFScript.txt in the same location as Combofix.exe.
4. Then drag the CFScript.txt into ComboFix.exe. This will start ComboFix again.



0
mahmood_786Author Commented:
once i have donethis what should i do?
0
rpggamergirlCommented:
Once you created CFScript(saved in the same location as ComboFix.exe), and after you drag and drop the script into ComboFix.exe... (see image below)
[IMG]http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif[/IMG]  

Then combofix will run and produce a new log.
Please post that log.
0
James MurrellProduct SpecialistCommented:
This question has been classified as abandoned and is closed as part of the Cleanup Program. See the recommendation for more details.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Browsers

From novice to tech pro — start learning today.